From a48a84a5ead90898630a23fc0de1c978d1e0b810 Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Sat, 16 Jul 2011 13:35:30 -0400 Subject: Set the ipa-modrdn plugin precedence to 60 so it runs last The default precedence for plugins is 50 and the run in more or less alphabetical order (but not guaranteed). This plugin needs to run after the others have already done their work. https://fedorahosted.org/freeipa/ticket/1370 --- install/share/modrdn-krbprinc.ldif | 1 + install/updates/10-config.update | 5 +++++ 2 files changed, 6 insertions(+) diff --git a/install/share/modrdn-krbprinc.ldif b/install/share/modrdn-krbprinc.ldif index b35ea25f4..15e6d3c95 100644 --- a/install/share/modrdn-krbprinc.ldif +++ b/install/share/modrdn-krbprinc.ldif @@ -9,3 +9,4 @@ ipaModRDNtargetAttr: krbPrincipalName ipaModRDNsuffix: @$REALM ipaModRDNfilter: (&(objectclass=posixaccount)(objectclass=krbPrincipalAux)) ipaModRDNscope: $SUFFIX +nsslapd-pluginPrecedence: 60 diff --git a/install/updates/10-config.update b/install/updates/10-config.update index ed7033950..b3beefc8b 100644 --- a/install/updates/10-config.update +++ b/install/updates/10-config.update @@ -3,3 +3,8 @@ # upgrading. dn: cn=config only:nsslapd-ssl-check-hostname: on + +# Set the precedence of the ipa-modrdn plugin so it runs after other +# plugins (the default is 50). +dn: cn=Kerberos Principal Name,cn=IPA MODRDN,cn=plugins,cn=config +only: nsslapd-pluginPrecedence: 60 -- cgit